OKX says it detected a coordinated Lazarus effort to misuse its DeFi services through OKX Web3, which it characterizes as a DEX aggregator rather than a custodian of customer assets. In response, the company temporarily suspended its DEX aggregator services after consulting regulators so it could deploy additional safeguards against further misuse. The excerpt states that OKX introduced a hacker address detection system for the Web3 DEX aggregator and a real-time system to track the hacker's latest addresses and block them in its centralized exchange environment. The disclosure matters because it shows Lazarus-linked abuse pressure on crypto trading infrastructure and the operational controls one provider says it adopted to limit that activity.